Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

0
votes
0answers
105 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
0
votes
1answer
24 views

JBoss - Not working the next day

We are having a problem, our JBoss EAP 6.3 cluster (2 nodes in domain mode + Apache) on a Centos OS, is not working after a period of inactivity (night). Its connected to an ldap. We do login, ...
0
votes
2answers
973 views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
2
votes
1answer
2k views

SSO with Apache and Kerberos issues

I am trying to set up SSO on my Apache web server using Kerberos so that users logged into the local domain are recognised and logged in immediately. I have followed this guide to the letter but I ...
0
votes
3answers
404 views

REMOTE_USER variable without @DOMAIN suffix

I administer an application that enables single sign on with valid AD users and runs on IIS currently. For performance increase, I have a task to migrate the web layer to Apache/Php on Linux. I have ...
0
votes
0answers
73 views

2K12 R2 ADFS 3 - IE Pass Through Authentication Fails on 2nd Login with 400

We have a customer who recently deployed ADFS 3.0 on Server 2K12 R2 as an IDP for our SaaS product (We are the SP and we use SimpleSAMLPHP). This customer is our first ADFS 3.0 customer, but we have ...
1
vote
1answer
636 views

Bad SAML Request

I'm trying to setup a web SAML login on Domino server. I received the SAML 2.0 metadata XML file from the identity provider which is Oracle Identity Federation 11g. I imported the metadata to a IdP ...
0
votes
1answer
46 views

Configuring kerberos/ntlm single signon with apache and sssd

What is the proper/cleanest way of setting up apache to support SSO using NTLM, or preferably Kerberos, with CentOS7 running sssd connected to an Active Directory domain controller? With realmd, ...
0
votes
0answers
15 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
1
vote
2answers
32 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
2
votes
2answers
390 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
0
votes
1answer
2k views

Upgrade vCenter 5.1 to 5.5 error 29102

I'm upgrading vCenter 5.1 to 5.5. After successful upgrading of Single Sign-On service, in the next step of upgrading Web Client when it needs Single Sign-On password and Lookup Service Url it used ...
0
votes
1answer
62 views

Redirect https dns entry to adfs relying party

We are on ADFS 3.0. We have a relying party trust setup for SSO to a SaaS solution. We would like to be able to create a DNS entry and have it work so that anytime someone requests this DNS address, ...
0
votes
2answers
85 views

ADFS 2.0 on Windows Server 2012 R2

Wanted to know if ADFS 2.0 can be installed on Windows Server 2012? The below link says it can be installed and gives command to install but that command fails throwing the error ...
8
votes
2answers
469 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
0answers
81 views

Smart Card Logon & next hop SSO RDP Login

I started to expriement with smart card based login. So far I can logon to my local PC using my smart card. What doesn't work is using sso when connecting via RDP to another server. I get the error ...
0
votes
1answer
43 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
0
votes
0answers
150 views

problems creating a keytab file on win server

I am trying to create a keytab file. i see a warning WARNING: pType and account type do not match. This might cause problems. The command i use is ktpass -princ ...
0
votes
0answers
51 views

remote_user or php_auth_user missing

I have the following configuration in my apache file. when i log in the REMOTE_USER or PHP_AUTH_USER is missing. My application depends on this. What can i do to make this available? Alias /paradox ...
0
votes
0answers
123 views

Browser (SPNEGO) kerberos authentication on Windows Phone 8 IE

Is there a way to make Internet Explorer on Windows Phone 8 authenticate to a site using Windows Integrated Security Authentication with Kerberos through the Negotiate (SPNEGO) protocol? It seems to ...
0
votes
0answers
56 views

Glassfish-3.0.1 mixing user sessions - SSO

We are experiencing a strange behaviour, we have an application (jsf 2.2.4 embedded) that has a login form, glassfish has sso enabled and a custom realm (LDAP). We have also several applications (some ...
0
votes
0answers
41 views

Login SSO - Access internal and external

I have a intranet login with SSO as follows: <Directory "Myaplication"> None Options AllowOverride All Order allow, deny Allow from all AuthName "intranet" AuthType SSPI ...
0
votes
0answers
128 views

Apache single sign on redirecting to success login page, Django application

All I have a Django web application with relative paths url. For instance, I have www.example.com/inventory/get_item/?item_id=5 In the apache configuration I am using oracle single sign on to ...
0
votes
1answer
69 views

Single sign on and active directory federation

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign on (SSO)? From a simple look at things both seem to do much the same thing in ...
1
vote
0answers
199 views

vSphere 5.1 SSO upgrade issue

I´m having issues upgrading VMware vSphere Infrastructure from 5.1.0.1123961 to 5.1.1474365. First I ran into the issue described in the VMware KB 2046318 (Installing vCenter Single Sign-On fails ...
0
votes
1answer
699 views

Citrix Netscaler 10.1 AAA Application Traffic Single Sign On

I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
-1
votes
1answer
78 views

set SAML request for Office 365 Single Sign On

i am trying to set up single sign on for office 365 for my domain using my own identity provider. i have configured the domain to get to the login page of my identity provider whenever a user types in ...
1
vote
0answers
81 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
1answer
856 views

Can I put /etc/passwd, /etc/group and /etc/shadow on an NFS share?

OK, this may be a dumb question but I'm wondering if I can export /etc/passwd, /etc/group and /etc/shadow from an NFS server and mount those files over the local ones on the client machine. The goal ...
1
vote
0answers
321 views

Windows SSO-Login only working once in Internet Explorer 11

We're about to migrate our users from Internet Explorer 8 to version 11. While testing the IIS-Windows-Authentication, I noticed that it does work, but it will only work once. I can press the ...
1
vote
1answer
678 views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
7
votes
4answers
9k views

How does SSO using Active Directory works where user is transparently logged in. (intranet webapp)

I'm told that it's possible to make a web application not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able to go to ...
2
votes
1answer
88 views

Getting started with active directory and cloud services

I am the 'IT guy' for a company that is rapidly growing and about to reach 100 employees. While my primary job is backend development for our websites and services; I am also tasked with setting up ...
0
votes
2answers
250 views

apache2.2 with mod_auth_kerb SSO: how to fallback to same directory when user can't authenticate

i implement an intranet CMS (Joomla 2.5) in a multidomain environment, logging them in with kerberos against Windows AD -> SSO. SSO with kerberos works perfect for the integrated domains, also the SSO ...
1
vote
6answers
2k views

SFTP server solution with AD Single Sign-on capabilities

I'm designing a windows client application that will retrieve files from an SFTP server. I would like to avoid forcing users to supply credentials on the client application - rather, their Windows ...
2
votes
1answer
4k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
1
vote
0answers
118 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
0
votes
0answers
134 views

Generating XML SAML with signature using xmlsec1

I am trying generate XML SAML with signature to SSO, but I have a problem and I don't know what is wrong. I don't have experience with Linux. I generated privkey and cacert with lib openssl. Next ...
0
votes
1answer
21 views

Apache SSO for a service that runs as local user

I am trying to move the web layer of our app onto Apache on Centos and use mod_auth_kerb to authenticate AD users and automatically log them in the app. I have successfully joined the domain, and can ...
1
vote
1answer
671 views

Samba 4 and SSH without password

I've a question to Samba 4 and Kerberos. I've had a functional SSH with SSO. But now when I've installed Samba 4 it doesn't work and it seems, that nobody has found any solution yet. I just read, that ...
1
vote
1answer
212 views

Apache authenticate against AD - some use DOMAIN\\username, others username

I have Request Tracker setup on a Ubuntu 12.04 server. It is configured to authenticate against active directory through winbind. Here's the relevant portion of the apache2 configuration: ...
4
votes
1answer
171 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
0
votes
1answer
183 views

SSO mod_auth_kerb with Active Directory

I have working for a long time to get Drupal 7 to perform SSO authentication to a Windows Server 2003 environment. What I have done so far: Create a user account for the linux server in Active ...
1
vote
1answer
490 views

ADFS 2.0 Best Practices

I'm having a hard time finding some good articles on best practices for ADFS. We are looking to implement SSO for less than 200 users. We plan on setting up a federated server farm (2 servers) ...
0
votes
0answers
45 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
2
votes
0answers
183 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
-1
votes
1answer
141 views

How to integrate Question2Answer into Typo3?

Question2Answer provides the option to implement Single Sign On. I want to integrate it into an existing installation of Typo3 (for Typo3 front end users). The questions I have: Do I need a certain ...
1
vote
1answer
458 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
1answer
516 views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
1
vote
1answer
308 views

Alfresco with only MIT Kerberos: What authentication.chain?

I want Alfresco to authenticate users using SSO with MIT Kerberos. What authentication.chain should I use? I tried authentication.chain=kerberos1:kerberos without success. Based on this answer I ...